Document Outline

• Quick Installation Guide
  • Hardware Installation
  • Basic System Configuration
    • S.1 Overview of Functions
• System
  • Chapter 1 Administration
    • 1.1 Admin
      • 1.1.1 Adding a Sub-Administrator
      • 1.1.2 Modifying the Password
    • 1.2 Permitted IPs
      • 1.2.1 Adding a Permitted IP
    • 1.3 Logout
      • 1.3.1 Logging out the System
    • 1.4 Updating Software
  • Chapter 2 Configuration
    • 2.1 Settings
      • 2.1.1 Exporting System Settings
      • 2.1.2 Importing System Settings
      • 2.1.3 Resetting the System to Factory Default Settings and Formatting the Hard Drive
      • 2.1.4 Enabling Email Alert Notification
      • 2.1.5 Rebooting the CS-2001
    • 2.2 Date / Time
      • 2.2.1 CS-2001 Time Settings
    • 2.3 Multiple Subnet
      • 2.3.1 Using NAT / Routing Mode For LAN Users to Access the Internet
      • 2.3.2 Using Multiple Subnets to Establish a VLAN Gateway to Regulate VLAN Users to Access the Internet
    • 2.4 Route Table
      • 2.4.1 Enabling Two Networks Connected by a Router to Access the Internet via the CS-2001
    • 2.5 DHCP
      • 2.5.1 Using an External DHCP Server to Allocate IP Addresses to Internal PCs
      • 2.5.2 Using the CS-2001 to Allocate IP Addresses to LAN PCs
    • 2.6 DDNS
    • 2.7 Host Table
    • 2.8 SNMP
      • 2.8.1 SNMP Agent Settings
      • 2.8.2 SNMP Trap Settings
    • 2.9 Bulletin Board
      • 2.9.1 Using CS-2001 to Announce the Information to LAN Users and DMZ Users
    • 2.10 Language
      • 2.10.1 Changing the Language
• Interface
  • Chapter 3 Interface
    • 3.1 Example
      • 3.1.1 Modifying the LAN Interface (NAT / Routing)
      • 3.1.2 Configuring the WAN Interface
      • 3.1.3 Using CS-2001 as a Gateway for Users on Two Subnets to Access the Internet (NAT/Routing)
      • 3.1.4 Using CS-2001 as a Gateway for the Internal Users to Access the Internet and Configure the DMZ for the External Users to Access the Network Resource
      • 3.1.5 Deploying the CS-2001 between the Gateway and LAN (configuring two subnets, one using Transparent Routing, the other one using NAT/Routing) for the LAN users to access the Internet
      • 3.1.6 Deploying the CS-2001 between the Gateway and the LAN (LAN1 and DMZ1), connecting LAN1 to the user’s PC (using NAT/Routing mode) and then connecting DMZ1 to user’s PC (using Transparent Bridging mode)
      • 3.1.7 Deploying CS-2001 between the Gateway and LAN (LAN1 and DMZ1) for LAN Users and DMZ Users to Access the Internet
      • 3.1.8 Using the CS-2001 Device as the Gateway and Connecting it to the LAN (There are Two LAN Interface, One Use NAT/Routing, the Other One Use Transparent Bridging Mode) for the LAN Users to Access the Internet
• Policy Object
  • Chapter 4 Address
    • 4.1 Example
      • 4.1.1 Using DHCP to Assign an IP to a Specific User and only Permitting FTP Access
      • 4.1.2 Creating a Policy for Certain Users to Connect to a Specific IP Address
  • Chapter 5 Service
    • 5.1 Example of Pre-defined
      • 5.1.1 Creating a Policy to Permit WAN Users Using VoIP Technology to Communicate with LAN Users (Using VoIP Port Numbers of TCP 1720, TCP 15328-15333 and UDP 15328-15333)
    • 5.2 Example of Service Group
      • 5.2.1 Creating a Policy with a Service Group to Limit Specific LAN Users to Access Only Certain Internet Services (HTTP, POP3, SMTP and DNS)
  • Chapter 6 Schedule
    • 6.1 Example
      • 6.1.1 Assigning Daily Internet Access Time Slots for LAN Users
  • Chapter 7 QoS
    • 7.1 Example
      • 7.1.1 Creating a Policy to Limit Upload and Download Bandwidth
  • Chapter 8 Authentication
    • 8.1 User / Group Authentication
      • 8.1.1 Regulating Internet Access with a Policy
    • 8.2 RADIUS Authentication
      • 8.2.1 Regulating Internet Access with a Policy – An Example using the RADIUS Server from Windows Server 2003
    • 8.3 POP3 Authentication
      • 8.3.1 Regulating Internet Access with a Policy – An Example of POP3
    • 8.4 LDAP Authentication
      • 8.4.1 Regulating Internet Access with a Policy － An Example of Windows Server 2003 Built-in LDAP Server
  • Chapter 9 Application Blocking
    • 9.1 Example
      • 9.1.1 Regulating the Use of IM Software ─ Messaging and File Transferring
      • 9.1.2 Regulating the Use of P2P Software － Downloading and Uploading
  • Chapter 10 Virtual Server
    • 10.1 Example
      • 10.1.1 Using a Server to Provide FTP, Web and Mail Services through the Regulation of a Policy
      • 10.1.2 Using Multiple Virtual Servers to Host a Web Site through the Regulation of a Policy
      • 10.1.3 A VoIP Session Between an External and Internal User (VoIP Ports: TCP 1720, TCP 15321-15333 and UDP 15321-15333)
      • 10.1.4 Using Multiple Virtual Servers to Provide HTTP, POP3, SMTP and DNS Services through the Regulation of a Policy
  • Chapter 11 VPN
    • 11.1 Example
      • 11.1.1 Using Two CS-2001 Devices to Mutually Access the Resources of Two Subnets via an IPSec VPN Connection
      • 11.1.2 Creating an IPSec VPN Connection under Windows 2000 by a CS-2001 Device
      • 11.1.3 Creating an IPSec VPN Connection between Two CS-2001 Devices (An Aggressive Mode Example)
      • 11.1.4 Using Two CS-2001 Devices to Connect Outbound Load Balance with IPSec VPN (Using GRE/IPSec Package Algorithm)
      • 11.1.5 Establishing an IPSec VPN Connection by Three CS-2001 Devices
      • 11.1.6 Using Two CS-2001 Devices to Establish PPTP VPN Connection (Outbound Load Balancing)
      • 11.1.7 Using Two CS-2001 Devices to Establish PPTP VPN Connection
      • 11.1.8 Establishing PPTP VPN Connection by One CS-2001 Device and One PC Running Windows 2000
• Mail Security
  • Chapter 12 Configuration
    • 12.1 Mail Domains
      • 12.1.1 Using Mail Domains to Filter Emails
    • 12.2 Account Manager
      • 12.2.1 Using CS-2001 to Filter Mail Accounts
      • 12.2.2 Accessing Personal Email Viewer
      • 12.2.3 Using Whitelist and Blacklist to Filter Emails
    • 12.3 Mail Relay
      • 12.3.1 Using CS-2001 as a Gateway (Set the Mail Server in DMZ under Transparent Mode)
      • 12.3.2 Deploying the CS-2001 Device between the Gateway and Mail Server (Mail Server is in DMZ under Transparent Mode)
      • 12.3.3 Using CS-2001 as Gateway to Enable Branch’s Employees to Send Emails via Headquarters’ Mail Server (Set the Mail Server under DMZ Transparent Routing Mode)
    • 12.4 Mail Notice
      • 12.4.1 Retrieving Spam or Virus Emails from the Mail Notice (An Outlook Exparess Example)
    • 12.5 Queued Mail
      • 12.5.1 Monitoring Email Delivery Status
    • 12.6 Mail Signatures
  • Chapter 13 Anti-Spam
    • 13.1 Example
      • 13.1.1 Detecting Whether Emails are Spam
      • 13.1.2 Using CS-2001 in Accordance with Whitelist and Blacklist to Filter Spam (Mail Server Is Deployed in DMZ under Transparent Mode)
      • 13.1.3 Deploying CS-2001 in between Gateway and Mail Server and Filtering Spam with Global Rule (Mail Server Is Deployed in DMZ under Transparent Mode)
      • 13.1.4 Improving Bayesian Filtering Accuracy by Training Spam Filtering / Ham-Filtering (An Outlook Express Example)
      • 13.1.5 Improving Bayesian Filtering Accuracy by Training Spam Filtering / Ham-Filtering
  • Chapter 14 Anti-Virus
    • 14.1 Example
      • 14.1.1 Filtering Out the Virus Emails on Mail Server
      • 14.1.2 Using CS-2001 as a Gateway to Filter Out Virus Emails (Mail Server Is Deployed in LAN under NAT Mode)
  • Chapter 15 Mail Reports
    • 15.1 Statistics
    • 15.2 Logs
• Web Filter
  • Chapter 16 Configuration
    • 16.1 Example
      • 16.1.1 Regulating User’s Access to Specific Websites Using Blacklist and Whitelist
      • 16.1.2 Regulating User’s access to Specific Website, Downloading or Uploading Specific File Extension via HTTP or FTP or the Access to Specific MIME Types/ Script Types
  • Chapter 17 Reports
    • 17.1 Statistics
    • 17.2 Logs
• IDP
  • Chapter 18 Configuration
  • Chapter 19 Signatures
    • 19.1 Example
      • 19.1.1 Adopting Packets Inspection along with Custom and Pre-Defined Signatures to Detect and Prevent the Intrusion
  • Chapter 20 IDP Report
    • 20.1 Statistics
    • 20.2 Logs
• Web VPN / SSL VPN
  • Chapter 21 Web VPN / SSL VPN
    • 21.1 Example
      • 21.1.1 Configuring Web / SSL VPN Connection settings for External Clients
• IM Recording
  • Chapter 22 Configuration
    • 22.1 Example
      • 22.1.1 Recording the Use of MSN / QQ Messenger
  • Chapter 23 Reports
    • 23.1 Statistics
    • 23.2 Message History
• Policy
  • Chapter 24 Policy
    • 24.1 Example
      • 24.1.1 Creating a Policy to Monitor the Internet Access of LAN Users
      • 24.1.2 Creating a Policy to Restrict the Access to Specific Web Sites
      • 24.1.3 Creating a Policy to Grant Internet Access to Only Authenticated Users on Schedule
      • 24.1.4 Creating a Policy to Enable a Remote User to Control a LAN PC with Remote Control Software (pcAnywhere)
      • 24.1.5 Creating a Policy to Limit the Bandwidth, Daily Total Traffic Amount and Maximum Concurrent Sessions of an Incoming Session to a FTP Server (A NAT Mode Example)
      • 24.1.6 Creating a Policy to Enable LAN / WAN Users to Have Email Access (A Transparent Mode Example)
• Anomaly Flow IP
  • Chapter 25 Anomaly Flow IP
    • 25.1 Example
      • 25.1.1 Configuration for Alerts and the Blocking of Internal DDoS Attacks
• Advance
  • Chapter 26 Inbound Balancing
    • 26.1 Example
      • 26.1.1 Creating an A Record to Load Balance a Web Server Using the Backup Mode
      • 26.1.2 Creating an A Record to Load Balance a Web Server Using the Round-Robin Mode
      • 26.1.3 Creating a CNAME Record to Load Balance a Web Server Using the Round-Robin Mode
      • 26.1.4 Creating a MX Record to Load Balance a Mail Server Using the Round-Robin Mode
  • Chapter 27 High Availability
    • 27.1 Example
      • 27.1.1 High Availability Deployment
  • Chapter 28 Co-Defense System
    • 28.1 Example
      • 28.1.1 Quickly Isolating Any Anomaly Flow in the Internal Network by Utilizing the Core and Edge Switch
• Monitoring
  • Chapter 29 Logs
    • 29.1 Traffic
      • 29.1.1 Viewing the Protocols and Port Numbers Used during an Access to CS-2001
    • 29.2 Event
      • 29.2.1 Viewing System History Access and the Status of WAN
    • 29.3 Connection
      • 29.3.1 Viewing the Connection Logs of WAN Interface
    • 29.4 Viruses
      • 29.4.1 Viewing the Detected Viruses from Internal Users Using HTTP / Web Mail / FTP Protocol to Transfer Files
    • 29.5 Application Blocking
      • 29.5.1 Viewing the Logs
    • 29.6 Concurrent Sessions
      • 29.6.1 Viewing the Logs of Concurrent Sessions that have been Exceeded the Configured Value
    • 29.7 Quota
      • 29.7.1 Viewing the Logs of Quota that Has Been Reached
    • 29.8 Log Backup
      • 29.8.1 Archiving or Retrieving Logs Generated by CS-2001
  • Chapter 30 Accounting Reports
    • 30.1 Flow Analysis
    • 30.2 Today’s Top Chart
    • 30.3 Historical Top Chart
  • Chapter 31 Traffic Grapher
    • 31.1 WAN Traffic
    • 31.2 Policy-Based Traffic
  • Chapter 32 Diagnostic Tools
    • 32.1 Ping
    • 32.2 Traceroute
    • 32.3 Packet Capture
  • Chapter 33 Wake-On-LAN
    • 33.1 Example
      • 33.1.1 Remote Controlling a PC
  • Chapter 34 Status
    • 34.1 Interface
    • 34.2 System Info
    • 34.3 Authentication
    • 34.4 ARP Table
    • 34.5 Sessions Info
    • 34.6 DHCP Clients
    • 34.7 Host Info